Privacy Policy

Information and use

You can play locally or online without an account. Online guests receive a temporary name and session identifier. Optional accounts store a username, password hash, optional recovery email, and gameplay statistics and activity. Usernames, presence and selected statistics are visible to other players; recovery emails are private.

Passwords are not stored in plaintext. We store a salted cryptographic password hash to authenticate your account.

We use this information to run games, maintain scores, secure accounts and provide recovery. Local games contribute basic results to community totals; online guest results are excluded. Providers process technical information such as IP addresses, request details and security logs to deliver and protect the service. Contacting us also provides your email address and message.

Cookies and storage

Essential login cookies last 24 hours; online guest cookies last four hours. Browser storage remembers settings, input keys and player labels, plus temporary rematch information. You can clear site data in your browser; this does not delete an account.

Do Not Track and cross-site tracking

We do not sell player information or track your activity across third-party websites or online services for behavioral advertising. We do not use advertising networks or third-party behavioral analytics. Because we do not engage in this type of tracking, browser Do Not Track signals do not change how the game operates.

Retention

Account information, signup agreement records and associated gameplay records remain while the account exists. Daily cleanup removes local result details after 30 days; minimal receipt IDs remain to prevent duplicate counting. Community totals may remain after account deletion.

Online guest identities are removed when their session expires or the empty room is cleaned up. Login sessions expire after 24 hours and single-use reset links after 30 minutes; expired database records are cleaned up daily. Browser preferences remain until cleared.

Security logs, support messages and provider backups follow their purpose, provider settings and any legal retention requirements; there is no single fixed deletion period for these records.

Service providers

Cloudflare hosts, stores and protects the game and forwards privacy email. Resend delivers account and password-reset emails, processing the recipient address, message content and delivery information. Google Gmail stores support messages. These providers may process data outside your country. Information may also be shared where necessary to comply with law or protect the service.

Children's privacy

Block Burner is intended for a general audience and is not directed to children under 13. Registered accounts are available only to users aged 13 or older. We do not knowingly collect personal information from children under 13. If we learn that a child under 13 has provided personal information, we will take appropriate steps to delete it. Parents or guardians can contact [email protected] with concerns.

Your choices and requests

Accounts and recovery email are optional. Temporary room references are cleared through a retryable cleanup process. For access, correction or other privacy requests, email [email protected]. We verify ownership; never email your password. Available rights and response deadlines depend on applicable law. We will explain any records that must be retained.

Changes to this policy appear here with an updated date. We provide additional notice or obtain consent where required.